Policy Notary evidence
Returns allowed, denied, or unknown with policy version, source reference, and its own Decision Record.
Krafthaus workflow app
Check cited refund policy, operating limits, and ownership before a support or Customer Success credit changes billing state. Preserve both decisions, the exact handoff, and what happened next.
Two records, one mutation
A policy lookup alone should not move money. The gate resolves Refund Policy Notary evidence server-side, binds it to the exact account, case, amount, and operator, then asks Decide whether the billing handoff may proceed.
Returns allowed, denied, or unknown with policy version, source reference, and its own Decision Record.
Applies credit limits, prior-credit history, fraud signals, and manager approval to the exact proposed mutation.
Records the billing transaction or review-ticket reference before the later customer outcome can be attached.
Executable pilot
The browser submits only closed case facts to /api/customer-operations-credit-gate. Krafthaus resolves policy evidence server-side and returns a customer_operations_credit_gate_packet only after the separate credit Decision Record is complete.
Policy and authorization
Run a case to see the Policy Notary evidence, Credit authorization, Decision Record, and billing handoff.
Execution and outcome
Use the billing transaction, credit-balance entry, or review-ticket reference. This demo records the handoff; it does not mutate Stripe or another billing system.
Application contract
The public pilot proves policy lineage, deterministic authorization, action binding, and lifecycle evidence. A production install places the same boundary between a support system and one billing mutation.
Pins the closed intake, direct Rulebook v1 binding, exact billing mutation, receipt requirement, and outcome path.
Policy layer Refund Policy NotarySupplies cited policy facts and its own Decision Record. It never authorizes the billing mutation by itself.
Production install Support plus billing connectorBind one support workflow and one reversible customer-state mutation before expanding to cancellation, plan, or entitlement changes.